CVE-2016-10611

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

strider-sauce is Sauce Labs / Selenium support for Strider. strider-sauce downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-311CWE-310

Affected software

No affected versions have been published.

Timeline

Published
May 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-106128.1dalek-browser-ie-canary is Internet Explorer bindings for DalekJS. dalek-browser-ie-canary downloads binary resources over HTTP, which leaveCVE-2016-106135.9bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacksCVE-2016-106148.1httpsync is a port of libcurl to node.js. httpsync downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may CVE-2016-106158.1curses is bindings for the native curses library, a full featured console IO library. curses downloads binary resources over HTTP, which leaCVE-2016-106168.1openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which lCVE-2016-106178.1box2d-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execuCVE-2016-106188.1node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks.CVE-2016-106198.1pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attackCVE-2016-10629.8Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC ContinCVE-2016-106208.1atom-node-module-installer installs node modules for atom-shell applications. atom-node-module-installer binary resources over HTTP, which lCVE-2016-106218.1fibjs is a runtime for javascript applictions built on google v8 JS. fibjs downloads binary resources over HTTP, which leaves it vulnerable CVE-2016-106228.1nodeschnaps is a NodeJS compatibility layer for Java (Rhino). nodeschnaps downloads binary resources over HTTP, which leaves it vulnerable t
CVE-2016-10611: High severity, CVSS 8.1 | Vulnix